shadd0wtaka/Zen AI Pentest Security Scan
Automated security scanning with AI-powered analysis for CI/CD pipelines
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target | Target URL or IP address to scan | yes | — |
| scan-type | Type of scan (sast, dast, deps, secrets, full) | no | full |
| fail-on | Fail pipeline on severity level (critical, high, medium, low, none) | no | high |
| api-key | Zen AI Pentest API key (set as secret) | no | "" |
| output-format | Output format (sarif, json, html, markdown, junit, all) | no | sarif |
| intensity | Scan intensity (low, medium, high) | no | medium |
| modules | Comma-separated list of scan modules to enable | no | port_scan,web_scan,ssl_scan,ai_analysis |
| timeout | Scan timeout in seconds | no | 3600 |
| config-file | Path to configuration file | no | "" |
| upload-sarif | Upload SARIF results to GitHub Security tab | no | true |
| artifact-name | Name for the uploaded artifact | no | zen-pentest-results |
| github-token | GitHub token for PR comments and checks | no | ${{ github.token }} |
| create-pr-comment | Create PR comment with results | no | true |
| create-check-run | Create GitHub Check Run | no | true |
Outputs
| name | description |
|---|---|
| scan-id | Unique identifier for the scan |
| results-file | Path to the generated results file |
| findings-count | Total number of findings |
| critical-count | Number of critical findings |
| high-count | Number of high severity findings |
| risk-score | Overall risk score (0-100) |
| scan-status | Status of the scan (success, failure) |
| sarif-path | Path to SARIF output file |